Sources / dates / confidence
The source is
part of the story.
Our job is to make cybersecurity evidence understandable and useful. The limits stay attached.
What a source can actually establish.
First-party incident disclosures, government advisories, research reports and standards form the starting point. Provider observations have a defined field of view. An attributed campaign is an assessment unless stronger evidence supports it.
A date never implies we were there.
Backfill records retain original source dates and event dates separately. This local review edition has no historical site publication dates. New analyses are prepared in September 2026, including when they explain an older incident.
Depth, with a visible revision trail.
The original twenty research files are inventoried. Nineteen have readable library routes; the website planning chapter stays private. Twelve original field guides are available. These inherited drafts include material that still needs claim-level review.
Read the original correction record ↗Each dataset keeps its meaning.
EuRepoC points represent historical affected countries at reference coordinates. CISA KEV records describe vulnerabilities confirmed as exploited. The globe does not simulate live attacks. EuRepoC is licensed CC BY-NC 4.0; public use awaits the owner’s review.
EuRepoC release and methodology ↗Explore without handing over data.
The baseline checklist saves locally in your browser. Search works against the site’s own index. No contact form or newsletter collection is enabled in this preview.
Useful to defenders.
Exercises focus on preparation, investigation choices and recovery. They contain no intrusion instructions. Interviews remain off until a real interview is approved.
Review edition / 19 September 2026
A larger archive. The same evidence rules.
This edition connects the existing 100-record retrospective pack to 20 archive analyses, 15 source briefs, 19 research chapters and 12 field guides: 166 reading routes. These are pieces, not 166 unique incidents; some analyses discuss the same events.
Dates are inherited with their original precision and uncertainty. This design pass is not a fresh fact-check of every historical claim. The 99 inherited image records retain pending provenance and rights review. Five newly selected primary-source visuals have source URLs, credits and original-file hashes in the private manifest. No images were AI-generated for this edition.
Inspect the new source visuals ↗